updated with note about security certificate renewal